$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: 4Vz8YNRs8xq1lq/iy7102uk8f2vH2yQ5J9MTJd8LJA8= Subject key identifier: E5:AC:49:17:6A:04:51:E5:F5:FE:C0:45:C3:E6:DE:11:27:4E:9C:0A Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 26A993CD89048B35EB7D67C7E470DCA2CEBDA818 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: 71 Signing time: Thu 01 May 2025 16:51:42 +0000 Manifest this update: Thu 01 May 2025 16:46:42 +0000 Manifest next update: Mon 05 May 2025 01:06:42 +0000 Files and hashes: 1: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: /bZbR11cnZtZehdjSmG4mAfOl1yhX7TJF+q9sdisxMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 01:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a9:93:cd:89:04:8b:35:eb:7d:67:c7:e4:70:dc:a2:ce:bd:a8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: May 1 16:46:42 2025 GMT Not After : May 5 01:06:42 2025 GMT Subject: CN=E5AC49176A0451E5F5FEC045C3E6DE11274E9C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:87:05:39:8f:c8:f2:7a:94:ef:a7:c2:7a: 4a:ce:3a:08:98:9f:4b:7d:57:60:56:7e:67:7b:83: 50:f3:76:cf:de:71:c7:ea:3f:48:31:19:cd:ea:41: b3:40:95:1e:79:1a:df:cb:4b:10:e4:f5:6e:d9:09: d8:19:b8:92:c7:6d:6c:d7:20:3d:05:3a:a3:92:a3: d8:e3:1a:d9:5d:03:4a:a0:8e:a9:9d:40:45:8b:11: 06:5c:27:5b:2b:02:ed:d2:b7:ef:66:14:5d:59:ff: ce:e0:c9:2f:94:ff:8d:3f:41:a9:00:a8:02:af:a5: b8:d4:3a:d9:82:f7:f4:d3:11:a6:f0:c2:e2:e9:b7: 60:98:d7:b3:af:a7:0a:9e:b5:ff:7f:c3:ce:17:5f: b1:5e:df:f1:87:d9:38:b9:88:87:ca:14:0c:04:cf: 17:d5:70:b0:be:a8:bf:74:d6:86:a1:bc:fd:7c:cc: 16:8b:27:15:85:34:94:c2:55:14:88:b7:fc:fe:85: cb:65:43:00:2b:cb:64:7d:84:1a:de:13:38:54:74: c9:b0:75:64:0f:ce:3e:96:b3:30:e3:ae:d8:2e:6c: 7c:3e:03:bc:52:10:e1:4b:1c:6e:3d:f8:40:75:76: 21:da:d5:7f:64:fe:79:c7:63:3b:0d:8a:1b:5e:e4: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AC:49:17:6A:04:51:E5:F5:FE:C0:45:C3:E6:DE:11:27:4E:9C:0A X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b3:00:43:13:34:e7:28:b6:2a:6d:1d:c4:23:01:fc:81:b0: 29:3a:57:a5:6a:57:58:51:1e:44:e8:52:fd:e3:00:35:23:c8: 9f:15:11:69:ac:3b:1d:57:73:97:93:3c:7a:a9:87:ed:fb:bc: 0e:94:f2:5f:99:3d:17:ac:f4:f7:6b:6b:f2:9c:74:9c:d9:c6: d3:d6:77:8e:87:22:75:24:be:f1:1d:f8:a9:ce:1d:4f:3a:aa: ca:a7:e5:38:51:20:97:7a:0e:33:fe:87:d8:e2:b3:40:e4:0c: 2e:99:26:1e:8a:88:34:48:39:df:72:7f:22:7d:dd:0c:3e:16: 2a:ab:92:bf:e9:e2:5a:3d:61:6a:87:30:db:2b:a9:d5:be:f5: f6:a4:98:89:1e:5a:a3:d7:33:b1:b1:1a:b4:8a:b8:d7:2e:67: 8c:3e:75:33:0e:1b:8c:f9:5a:a7:c3:87:42:7a:34:b2:9b:d5: ce:7e:ca:6c:28:67:ad:e2:c5:72:4d:50:e7:4d:2f:82:b6:48: 38:2a:7b:c2:35:70:e8:91:ce:45:75:92:48:e3:e7:2f:67:8f: f6:f4:55:e1:2e:ad:36:fc:4c:36:be:23:3e:bf:9b:18:94:ca: bf:0e:c3:93:44:45:99:40:e4:d6:10:b7:be:b4:d3:90:b8:1c: 8d:bd:44:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqmTzYkEizXrfWfH5HDcos69qBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTA1MDExNjQ2NDJaFw0yNTA1MDUwMTA2NDJaMDMxMTAvBgNV BAMTKEU1QUM0OTE3NkEwNDUxRTVGNUZFQzA0NUMzRTZERTExMjc0RTlDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNiocFOY/I8nqU76fCekrOOgiY n0t9V2BWfmd7g1Dzds/eccfqP0gxGc3qQbNAlR55Gt/LSxDk9W7ZCdgZuJLHbWzX ID0FOqOSo9jjGtldA0qgjqmdQEWLEQZcJ1srAu3St+9mFF1Z/87gyS+U/40/QakA qAKvpbjUOtmC9/TTEabwwuLpt2CY17Ovpwqetf9/w84XX7Fe3/GH2Ti5iIfKFAwE zxfVcLC+qL901oahvP18zBaLJxWFNJTCVRSIt/z+hctlQwAry2R9hBreEzhUdMmw dWQPzj6WszDjrtgubHw+A7xSEOFLHG49+EB1diHa1X9k/nnHYzsNihte5P9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5axJF2oEUeX1/sBFw+beESdOnAowHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByzAEMTNOcotiptHcQjAfyBsCk6V6VqV1hR HkToUv3jADUjyJ8VEWmsOx1Xc5eTPHqph+37vA6U8l+ZPRes9Pdra/KcdJzZxtPW d46HInUkvvEd+KnOHU86qsqn5ThRIJd6DjP+h9jis0DkDC6ZJh6KiDRIOd9yfyJ9 3Qw+Fiqrkr/p4lo9YWqHMNsrqdW+9fakmIkeWqPXM7GxGrSKuNcuZ4w+dTMOG4z5 WqfDh0J6NLKb1c5+ymwoZ63ixXJNUOdNL4K2SDgqe8I1cOiRzkV1kkjj5y9nj/b0 VeEurTb8TDa+Iz6/mxiUyr8Ow5NERZlA5NYQt76005C4HI29RNA= -----END CERTIFICATE-----Generated at Fri May 2 13:52:10 2025 by rpki-client